CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d07b9ee1b3881447ac652b13c8115c6b8651f0d33dc477cb8e7971bb2621e9ac.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d07b9ee1b3881447ac652b13c8115c6b8651f0d33dc477cb8e7971bb2621e9ac.dll
Resource
win10v2004-20221111-en
Target
d07b9ee1b3881447ac652b13c8115c6b8651f0d33dc477cb8e7971bb2621e9ac
Size
56KB
MD5
d33fc2c7968e99a5c1babdeff388ce4b
SHA1
8f8e56cbabfabfcebf93fcf95e8f87969c86e235
SHA256
d07b9ee1b3881447ac652b13c8115c6b8651f0d33dc477cb8e7971bb2621e9ac
SHA512
99311d7b55f5b0b77342a277e708426ecc4abe13f4a114fbb098b0f33fa1f70d9c397d47f3171efcde1c634c2c3736c7a0ce1164d6f725a2e3e7d577a1671775
SSDEEP
768:MbPCSzfg1FrY/jWWspqRogtS2gBFHQY25aKjB5l+NMBQX+OQ5iwuFQanKvMjDs:PSb//0pWQ2a25VqMuXhwOQafE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ